[StepSecurity] ci: Harden GitHub Actions (#103)

Signed-off-by: StepSecurity Bot <[email protected]>
apache · Apr 26, 2024 · e4c9861 · e4c9861
1 parent 368cb0a
commit e4c9861
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -23,6 +23,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true
 
+permissions:
+ contents: read
+
 jobs:
  build:
  runs-on: ubuntu-22.04

diff --git a/.github/workflows/testacc.yml b/.github/workflows/testacc.yml
@@ -23,6 +23,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-testacc
  cancel-in-progress: true
 
+permissions:
+ contents: read
+
 jobs:
  testacc:
  name: Acceptance Test